mercure vulnerabilities

1 known vulnerability in mercure from Dunglas. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  mercure: Improper Validation of Unsafe Equivalence in Input

  CVE-2026-39972Apr 9, 2026Dunglas

  Mercure is a protocol for pushing data updates to web browsers and other HTTP clients in a battery-efficient way. Prior to 0.22.0, a cache key collision vulnerability in TopicSelectorStore allows an attacker to poison the match result cache, potentially causin